Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-2277 EUVD-2022-3115GHSA-85wg-cg5p-m76p

Arbitrary file read vulnerability in Jenkins Storable Configs Plugin

Published Sep 16, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Storable Configs Plugin Package: org.jvnet.hudson.plugins:storable-configs-plugin Category: Web / CMS Ecosystem: Maven

Description

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Storable Configs Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:storable-configs-plugin <= 1.0 — GHSA-85wg-cg5p-m76p

References